Social EngineeringGovernmentGovernmentPhishingData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

City of Sun Valley

bd_4789ab207d66825a · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 20, 2024

Filed

Apr 17, 2024

To disclose

28 days

Affected

35state residents only

Confidence

66%

Full breach record for City of Sun Valley →2 incidents on file

City of Sun Valley (Idaho) notified the Idaho AG on April 17, 2024, of a phishing incident affecting one Fire Department employee's email account. Unauthorized access occurred March 14-20, 2024. Data exposed included names, SSNs, and driver's licenses for 35 Idaho residents, plus one payment card number. The City engaged forensic investigators, reset credentials, retrained staff, and offered 12 months of Experian credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 6 days

discovery → filing · 28 days

Mar 14, 2024

Begins

Mar 20, 2024

Discovered

Apr 17, 2024

Filed

vs. sector median

7 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed35 affectedView incident

Name: City of Sun Valley
norm: city of sun valley
Domain: sunvalleyidaho.gov

Name: City of Sun Valley
norm: city of sun valley
Domain: sunvalleyidaho.gov
Industry: Governmentllm

Discovered: Mar 20, 2024
Breach occurred: Mar 14, 2024 – Mar 20, 2024
Undetected for: 6 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 17, 2024
Affected individuals: 35state-resident count only
Data types: Identity (basic)Government IDFinancial account
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Provided notice of this incident and regular updates to the Idaho Chief Information Security OfficerProvided notice of this incident to the Idaho Attorney General’s office
Initial access: phishing_link

During the incident: Securing the impacted email account by changing password
Retrained employee regarding cybersecurity practices related to email
Communicated with all staff regarding increased awareness of phishing emails
Enhancing internal policies and procedures related to cybersecurity
Evaluating the email retention policy
Ongoing investigation of additional tools, training, and third-party monitoring partnerships to strengthen security
Provided notice of this incident and regular updates to the Idaho Chief Information Security Officer
Engaged a nationally-recognized cyber security and digital forensics firm
Changes made: Securing the impacted email account by changing the password
Retraining employee regarding cybersecurity practices related to email
Communicating with all staff regarding increased awareness of phishing emails
Enhancing internal policies and procedures related to cybersecurity
Evaluating our email retention policy
Ongoing investigation of additional tools, training, and third-party monitoring partnerships to strengthen security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 28 days(28 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.ag.idaho.gov/content/uploads/2024/04/04-17-2024-City-of-Sun-Valley.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 17, 2024
Raw hash: af775203906b2d5f4963dcb50aaed952976538ceee7a3c64cf376bba827a5b21

Reporting entityCity of Sun Valley

Victim entityCity of Sun Valley

Incidentdiscovered Mar 20, 2024

Stated responseSecuring the impacted email account by changing password

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.ag.idaho.gov